Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/_qdh0DqaoSRZPYA5w6K9NrUGflg.roa
File: _qdh0DqaoSRZPYA5w6K9NrUGflg.roa (raw, json)
Hash identifier: oMXyiPl2HE6MGvwv6376mSIpIpbnkvNf+x/p58mxPY8=
Subject key identifier: FE:A7:61:D0:3A:9A:A1:24:59:3D:80:39:C3:A2:BD:36:B5:06:7E:58
Certificate issuer: /CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Certificate serial: 0133F919
Authority key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/_qdh0DqaoSRZPYA5w6K9NrUGflg.roa
Signing time: Sat 01 Jan 2022 11:57:04 +0000
ROA not before: Sat 01 Jan 2022 11:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.62.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20183321 (0x133f919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Validity
Not Before: Jan 1 11:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fea761d03a9aa124593d8039c3a2bd36b5067e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:ff:15:70:d4:36:92:da:81:bc:ed:36:0b:
2d:39:8e:0b:72:fd:b2:3a:d5:bb:0a:53:c0:3d:67:
7c:79:55:5f:a6:79:ee:84:40:8a:a3:74:13:f4:7a:
70:bd:ad:55:85:67:ec:80:3e:b1:51:3b:e1:98:d2:
d5:17:b9:64:8b:3a:53:de:cd:27:c2:55:ba:4a:e2:
32:ea:f0:d2:ea:74:61:8f:a6:f2:5b:ca:36:b3:00:
d9:71:6c:d7:3f:b5:b0:d4:3c:00:56:18:80:b3:c2:
86:37:10:54:5d:0d:3f:bc:a8:a1:18:53:59:18:a7:
32:fa:8f:b9:e9:d5:f6:a2:e4:f6:68:85:a0:e0:c5:
7a:b6:7b:1c:d9:2b:75:86:02:6a:1b:0e:2b:80:29:
ba:12:e5:9b:6a:4d:2a:5b:b8:af:2f:a4:5a:10:32:
64:28:00:02:3b:0b:de:85:0f:8e:84:fb:a1:60:f4:
57:36:42:b0:1d:0a:27:13:2c:9c:c1:e9:17:08:0f:
df:06:31:8b:b4:c2:af:98:cc:87:ac:70:1a:14:89:
a8:aa:82:0b:06:c3:fe:95:8e:f3:c2:3d:da:4c:2d:
ba:00:86:aa:8c:9b:8c:5c:9b:1c:ea:1b:dd:a9:dc:
f3:86:19:d6:05:8f:5c:87:2f:3e:cd:e0:3d:10:ed:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:61:D0:3A:9A:A1:24:59:3D:80:39:C3:A2:BD:36:B5:06:7E:58
X509v3 Authority Key Identifier:
keyid:33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/_qdh0DqaoSRZPYA5w6K9NrUGflg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c0:a8:b7:40:a1:33:25:68:dc:26:ae:f6:c3:d7:61:35:37:
df:10:e0:10:d3:0b:d8:b1:6b:11:4c:1a:de:9b:b1:6d:a9:1c:
d3:2b:ed:78:5d:51:d6:ba:2d:21:eb:41:10:ea:18:d5:89:95:
25:2a:64:bc:85:75:eb:fa:ce:d1:aa:2b:13:dd:f7:29:80:4d:
76:0c:ff:2e:2e:3f:9d:c2:4d:20:4c:76:50:c0:d3:ec:a5:17:
e9:55:5b:5e:a7:1d:e1:1f:5e:cc:9c:0d:8d:e3:c6:10:0a:55:
5e:db:9a:dd:e6:bf:1f:49:40:94:39:69:ec:25:e5:96:13:4e:
58:e0:29:bd:67:38:26:26:c7:62:9a:48:80:6c:a4:ed:90:0f:
d0:88:1f:34:da:10:ff:a7:b7:e2:45:67:43:a4:f1:34:67:f2:
58:c3:c1:9d:fc:6f:a4:ec:b9:ae:fa:dd:62:d5:9c:73:04:a2:
0d:3c:6c:93:c2:aa:02:e5:1b:dd:13:f6:2e:bd:62:40:6b:f8:
93:a4:a7:79:14:9f:27:0e:4b:37:dc:65:21:40:d4:00:f8:78:
89:9c:ef:e1:32:d7:2e:e7:a7:f5:b3:61:e8:34:6d:9e:a4:ed:
2b:e4:25:01:05:f0:94:cb:f9:12:0f:4a:7a:90:2d:90:f0:e1:
cd:1a:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org